Microsoft exploit could control Bing search results and Office 365 data – The Verge
A dangerous vulnerability was detected in Microsoft’s Bing search engine earlier this year that allowed users to alter search results and access other Bing users’ private information from the likes of Teams, Outlook, and Office 365. Back in January, security researchers at Wiz discovered a misconfiguration in Azure — Microsoft’s cloud computing platform — that compromised Bing, allowing any Azure user to access applications without authorization.
The vulnerability was detected in the Azure Active Directory (AAD) identity and access management service. Applications using the platform’s multi-tenant permissions are accessible by any Azure user, requiring developers to validate which users can access their apps. This responsibility isn’t always clear, making misconfigurations a common occurrence — Wiz claims 25 percent of all multi-tenant apps it scanned lacked proper validation.
I hacked into a @Bing CMS that allowed me to alter search results and take over millions of @Office365…
The post Microsoft exploit could control Bing search results and Office 365 data – The Verge first appeared on SEO, Marketing and Social News | OneSEOCompany.com.
source: https://news.oneseocompany.com/2023/03/30/microsoft-exploit-could-control-bing-search-results-and-office-365-data-the-verge_2023033042829.html
Your content is great. However, if any of the content contained herein violates any rights of yours, including those of copyright, please contact us immediately by e-mail at media[@]kissrpr.com.